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[Title of the Invention] 
5 Image Forming Apparatus and Controlling Method Therefor 

[Abstract] 

[Object] 

An object is always execute a password check when a personal box is 
to be deleted. 

10 [Solution] 

In an image memory unit 3, a personal box area allocated for each 
individual is secured. The personal block area is associated with a name, a 
first password or, when the first password is not registered, a second 
password. When the contents of the personal box are to be output, the first 

15 password is checked if it is registered, and if not, the contents can be output 
without any password. When the personal box is to be deleted, legitimacy 
of operation is confirmed by checking the first password when the first 
password is registered and if not, by checking the second password. 
[Claims for Patent] 

20 1. An image forming apparatus, comprising: 

storing means including storage areas corresponding to an identifier, 
a first password and a second password, for storing image data in each 
storage area; 

first determining means, urging, when an image data of a storage 
25 area of interest is to be output, input of a password if the first password is 
registered for the storage area of interest, for determining whether the 
password matches the registered first password; 

output means for outputting the image data of the storage area of 
interest when the first password is not registered for the storage area of 
30 interest or when the input password matches the registered first password; 

second determining means, urging, when a storage area of interest is 
to be released, input of a password for the storage area of interest, for 
determining, when the first password is registered, whether the password 
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matches the first password or not, and when the first password is not 
registered, whether the password matches a second password or not; and 

area releasing means for releasing, when the input password 
matches the registered first or second password, the storage area of interest. 

5 

2. The image forming apparatus according to claim 1, further 
comprising first registering means for registering said first password in 
correspondence with a storage area of interest, and second registering 
means for registering the second password when the first password is not 

10 registered. 

3. The image forming apparatus according to claim 1, wherein said 
second password is common to all the storage areas. 

15 4. A method of controlling an image forming apparatus, including 

storage means for storing image data in storage areas corresponding to an 
identifier, a first password and a second password respectively, said 
method comprising: 

the first determination step of urging, when an image data of a 

20 storage area of interest is to be output, input of a password when the first 
password for the storage area of interest is registered, and determining 
whether the password matches the registered first password; 

the output step of outputting, when the first password is not 
registered for the storage area of interest or when the input password 

25 matches the registered first password, the image data of the storage area of 
interest; 

the second determination step of urging, when the storage area of 
interest is to be released, input of a password for the storage area of 
interest, and determining, when the first password is registered, whether 
30 the password matches the first password, and when the first password is 
not registered, whether the password matches the second password; and 

the area releasing step of releasing, when the input password 
matches the registered first password or the second password, the storage 
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area of interest. 

5. The method of controlling an image forming apparatus according 
to claim 4, further comprising the first registration step of registering said 

5 first password in correspondence with the storage area of interest, and the 
second registration step of registering the second password when the first 
password is not registered. 

6. The method of controlling an image forming apparatus according 
10 to claim 4, wherein 

said second password is common to all the storage areas. 

7. A computer readable storage medium storing a program executed 
by a computer having storing means storing image data in storage areas 

15 corresponding to an identifier, a first password and a second password, 
respectively, for implementing: 

first determining means, urging, when an image data of a storage 
area of interest is to be output, input of a password if the first password is 
registered for the storage area of interest, for determining whether the 
20 password matches the registered first password; 

output means for outputting the image data of the storage area of 
interest when the first password is not registered for the storage area of 
interest or when the input password matches the registered first password; 
second determining means, urging, when a storage area of interest is 
25 to be released, input of a password for the storage area of interest, for 

determining, when the first password is registered, whether the password 
matches the first password or not, arid when the first password is not 
registered, whether the password matches a second password or not; and 
area releasing means for releasing, when the input password 
30 matches the registered first or second password, the storage area of interest. 

8. The computer readable storage medium according to claim 7, 
wherein 
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said program further implements by the computer, the first 
registering means for registering said first password in correspondence 
with the storage area of interest, and the second registering means for 
registering the second password when the first password is not registered. 

5 

9. The computer readable storage medium according to claim 7, 
wherein 

said second password is common to all the storage areas. 
[Detailed Description of the Invention] 
10 [Technical Field of the Invention] 

The present invention relates to an image forming apparatus having 
a personal box for storing document images to be printed for every 
identifier and to a method of controlling the same. 

[Prior Art] 

15 A digital copying machine having an electronic sorting function of 

PDL image has been known, which receives image data read by a scanner 
or PDL (Page Description Language) data transmitted from a host 
computer, temporarily stores, in a memory such as a hard disk, the received 
and bit map developed image data, repeatedly reads and prints designated 

20 image data from the memory and sorts the printed output. 

Among the digital copying machines having a hard disk, some have 
the function of a personal box. According to the personal box function, the 
storage area of the hard disk or the like is divided into user-by-user areas 
referred to as personal boxes, and images bit map-developed from the PDL 

25 data transmitted from the host are stored temporarily in the personal boxes 
user by user. At the time of output, the personal box is designated from an 
operation unit of a digital copying machine as necessary, and the image 
data read from the area is printed and output. 

In such an apparatus, a password may be used so as to prevent free 

30 access to the data. For example, for printing, a password is required to 
access each personal box, and the password is checked with the password 
registered for each personal box in advance, and the printing is done only 
when the password matches. The password is checked not only at the time 
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of printing but also at the time of maintenance including deletion or name 
change of the personal box itself, so as to prove legitimacy of the operator. 

Among the apparatuses in which the password is checked for an 
access to the personal box, some allows selection as to whether the 
5 password registration is necessary or not. In such an apparatus, data that 
should be confidential can be protected by registering a password, while 
data that should be shared with others can be freely accessed by any person, 
by not registering the password. 

[Problems to be Solved by the Invention] 

10 In the conventional apparatus described above, however, though it is 

advantageous that the personal box for which the password is not 
registered can be used by any one, it causes a problem that deletion of the 
personal box itself or the maintenance operation such as the change of the 
name can be done by any person. 

15 The present invention was made to solve the above described 

problem, and its object is to provide an image forming apparatus and a 
method of controlling the same, in which registration of a password for 
protecting the personal box is required, and therefore, even a personal box 
that does not require any password for printing data requires checking of 

20 the password for maintenance, so that the personal box is maintained only 
by a legitimate user. 

[Means to Solve the Problems] 

In order to attain the above described object, the present invention 
provides an image forming apparatus including: storing means including 

25 storage areas corresponding to an identifier, a first password and a second 
password, for storing image data in each storage area; first determining 
means, urging, when an image data of a storage area of interest is to be 
output, input of a password if the first password is registered for the 
storage area of interest, for determining whether the password matches the 

30 registered first password; output means for outputting the image data of 

the storage area of interest when the first password is not registered for the 
storage area of interest or when the input password matches the registered 
first password; second determining means, urging, when a storage area of 
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interest is to be released, input of a password for the storage area of 
interest, for determining, when the first password is registered, whether 
the password matches the first password or not, and when the first 
password is not registered, whether the password matches a second 
5 password or not; and area releasing means for releasing, when the input 

password matches the registered first or second password, the storage area 
of interest. 

Alternatively, the present invention provides a method of controlling 
an image forming apparatus, including: storage means for storing image 

10 data in storage areas corresponding to an identifier, a first password and a 
second password respectively, the method including : the first 
determination step of urging, when an image data of a storage area of 
interest is to be output, input of a password when the first password for the 
storage area of interest is registered, and determining whether the 

15 password matches the registered first password; the output step of 

outputting, when the first password is not registered for the storage area of 
interest or when the input password matches the registered first password, 
the image data of the storage area of interest; the second determination 
step of urging, when the storage area of interest is to be released, input of a 

20 password for the storage area of interest, and determining, when the first 
password is registered, whether the password matches the first password, 
and when the first password is not registered, whether the password 
matches the second password; and the area releasing step of releasing, 
when the input password matches the registered first password or the 

25 second password, the storage area of interest. 

Alternatively, the present invention provides a computer readable 
storage medium storing a program executed by a computer having storing 
means storing image data in storage areas corresponding to an identifier, a 
first password and a second password, respectively, for implementing: first 

30 determining means, urging, when an image data of a storage area of 
interest is to be output, input of a password if the first password is 
registered for the storage area of interest, for determining whether the 
password matches the registered first password; output means for 
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outputting the image data of the storage area of interest when the first 
password is not registered for the storage area of interest or when the input 
password matches the registered first password; second determining means, 
urging, when a storage area of interest is to be released, input of a 
5 password for the storage area of interest, for determining, when the first 

password is registered, whether the password matches the first password or 
not, and when the first password is not registered, whether the password 
matches a second password or not; and area releasing means for releasing, 
when the input password matches the registered first or second password, 
10 the storage area of interest. 

[Embodiments of the Invention] 

[Second Embodiment] 

Fig. 1 is a cross section of a digital copying machine as an example of 
the image processing apparatus in accordance with the present invention. 
15 Referring to the figure, on an upper portion of a body 100 of the 

digital copying machine, there is provided an automatic document feeder 
(DF) 280. 

A platen glass 201 is for positioning a document, and a scanner 202 
includes a document illuminating lamp 203, a scanning mirror 204 and the 

20 like. By a motor, not shown, scanner 202 is reciprocally scanned in a 
prescribed direction. The fight reflected from the document goes to 
scanning mirrors 204 to 206, passes through lens 207 and forms an image 
on a CCD sensor in an image sensor unit 208. An exposure control unit 
209 includes a laser, a polygon scanner and the like, and it emits a laser 

25 beam 219 modulated based on image signals that have been converted to 
electric signals and subjected to prescribed image processing at image 
sensor unit 208, to a photoreceptor drum 211. Around the photoreceptor 
drum 211, there are a primary charger 212, a developer 213, a corona 
charger 216, a pre-exposure lamp 214 and a cleaning apparatus 215. 

30 At the image processing unit 210, photoreceptor drum 211 is rotated 

by a motor/not shown, in a direction of the arrow in the figure, charged to a 
desired potential by primary charger 212, irradiated with the laser beam 
219 from exposure control unit 209, and thus a latent electrostatic image is 
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formed. The latent electrostatic image formed on photoreceptor drum 211 
is developed by developer 213 and visualized as a toner image. 

A transfer sheet of paper fed from a right cassette deck 221, a left 
cassette deck 222, an upper cassette 223 or a lower cassette 224 by means 
5 of pickup rollers 225, 226, 227 and 228 is fed by paper feed rollers 229, 230, 
231 and 232 to the body, transmitted to a transfer belt by a resist roller 233, 
and the visualized toner image is transferred onto the sheet by a corona 
charger 216. After the transfer, the residual toner on the photoreceptor 
drum is cleaned by the cleaner unit 215, and the residual charges are 

10 erased by the pre-exposure lamp 214. The transfer sheet after transfer is 
separated from the photoreceptor drum by a separation charger 217, and 
fed by a transfer belt 234 to a fixing unit 235. At the fixing unit, the 
image is fixed by pressure and heat, and the sheet is discharged to the 
outside of the body 100 by a discharge roller 236. 

15 A deck 250 that can contain 4000 sheets of transfer paper is mounted 

on the body 100. A lifter 25 1 of deck 250 is elevated in accordance with 
the amount of the sheets of transfer paper such that the sheet of the 
transfer paper is always in contact with the pickup roller 252, and the 
sheet of transfer paper is fed to the body by a paper feed roller 253. 

20 Further, a multiple manual feeder 254 that can contain 100 sheets of 
transfer paper is also mounted. 

Further, a paper discharge flapper 238 switches a route to a conveyor 
path 238 and a discharge path 243. A lower conveyer path 240 guides the 
sheet of transfer paper fed from the paper discharge roller 236 through an 

25 inversion path 239 to the re-feed path 241, with the sheet turned upside 
down. The sheet of transfer paper fed from the left cassette deck 222 to 
paper feed roller 230 is also guided to the re-feed path 241. The re-feed 
roller 242 refeeds the sheet of transfer paper again to the image forming 
unit 210. The discharge roller 244 is arranged near the paper discharge 

30 flapper 237, and discharges the sheet of transfer paper switched by the 
flapper 237 to the discharge path 243. When double sided recording 
(double sided copying) is desired, the paper feed flapper 237 is elevated 
upward, and a sheet of transfer paper, on which an image has already been 
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copied, is guided through conveyer path 238, inversion path 239, and lower 
conveyor path 240 to re-feed path 241. At this time, the sheet of transfer 
paper is fed to the conveyer path 240 by inversion roller 245 in the 
following manner: the sheet of transfer paper is drawn into the inversion 
5 path 239 to such a position that the rear end of the sheet of transfer paper 
is fully out of the conveyer path 238 and the sheet of transfer paper is 
pinched by the inversion path 245, and then the inversion roller 245 is 
rotated in the reverse direction. When the sheet of transfer paper is to be 
inverted and discharged out from the body, the paper discharge flapper 237 

10 is elevated upward, the sheet is drawn into the inversion path 239 to such a 
position that the rear end of sheet transfer paper is left on the conveyer 
path 238 by inversion roller 245, and the inversion roller 245 is rotated in 
the reverse direction, whereby the sheet of transfer paper is turned upside 
down and fed to the discharge roller 244. 

15 A paper discharge processing apparatus 290 stocks the sheets of 

transfer paper discharged one by one from the digital copying machine 100 
on a processing tray 294. When discharge of sheets for some image 
formation completes, a bundle of sheets of the transfer paper are stapled, 
and discharged to discharge tray 292 or 293 in a bundled state. The paper 

20 discharge tray 293 is controlled to move upward/downward by a motor, not 
shown, and moved to the position of the processing tray before the start of 
image processing. In a paper tray 291, a tab sheet to be inserted between 
the discharge sheets of transfer paper are stocked. A Z folder 295 folds the 
discharge sheet of transfer paper to Z shape. A binding machine 296 

25 collects one set of discharge sheets of transfer paper, folds at the center and 
staples for binding. The bound sheets of paper are discharged to discharge 
tray 297. 

<Control Mechanism of Digital Copying Machine> 
Fig. 2 is a schematic block diagram representing a control 
30 mechanism of a digital copying machine 100. A CPU 171 performs basic 
control of the digital copying machine 100, and it is connected to an ROM 
174 in which a control program is written, to a work RAM 175 for 
processing, an input/output port 173 and the like by means of address 
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buses and data buses. To input/output port 173, various loads (not shown) 
such as motors, clutches and the like controlling digital copying machine 
100, and inputs of sensors and the like detecting the paper position and so 
on (not shown) are connected. CPU 17 controls input/output successively 
through the input/output port 173 in accordance with the contents of ROM 
174, and performs the image forming operation. An operating unit 172 
displaying the state of the digital copying machine is connected to CPU 171. 
To CPU 171, an image processing unit 210 processing signals converted to 
electric signals at image sensor unit 109, and an image memory unit 3 
storing the processed image are connected. 

The details of the image memory unit 3 will be described with 
reference to Fig. 3. In the image memory unit 3, binary images are 
written to a page memory unit 301 consisting of a memory such as a DRAM, 
from an external I/F processing unit 4 and image processing unit 210 
through a memory controller 302, image is read to printer unit 2, and 
access for image input/output to a hard disk 304 as a large capacity storage 
apparatus is performed. External I/F processing unit develops the PDL 
input from an external computer to a bit map, and an LZ compressor 303 
compresses/decompresses the image data for input/output to and from the 
HD. 

Memory controller unit 302 generates a DRAM refresh signal for 
page memory 301, and arbitrates access from image I/F processing unit 4, 
image processing unit 210 and hard disk 304 to page memory 301. 
Further, in accordance with an instruction from CPU 171, it controls the 
wxite address to page memory unit 301, read address from page memory 
unit 301 and direction of reading. Thus, CPU 171 controls the function of 
laying out a plurality of document images at page memory unit 301 and 
outputting to the printer unit, the function of cutting out only a part of the 
image for output, and the function of image rotation. 

<Interface with the Outside> 

The configuration of the external I/F processing unit 4 will be 
described with reference to Fig. 3. As already described, external I/F 
processing unit 4 takes binary image data at a reader unit to external I/F 
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processing unit through image memory unit 3, and outputs the binary 
image data from external I/F to the printer unit 2 for image formation, 
through image memory unit 3. External I/F processing unit 4 includes a 
core unit 406, a facsimile unit 401, a hard disk 402 storing the 
5 communication image data of the facsimile unit, a computer interface unit 
403 for connection with an external computer 11, a formatter unit 404, and 
an image memory unit 405. 

The facsimile unit 401 is connected to a public circuit through a 
modem (not shown), and receives facsimile communication data from the 

10 public circuit and transmits facsimile communication data to the public 
circuit. Facsimile unit 401 performs the facsimile function, including 
transmission of a facsimile at a designated time and transmission of an 
image data in response to an inquiry from the counterpart of the 
communication with a designated password, while holding images for the 

15 facsimile in a hard disk 402. Thus, once an image is transferred from 

reader unit 1 through image memory unit 3 to facsimile unit 401 and the 
hard disk 402 for the facsimile, facsimile transmission is possible without 
using the reader unit 1 and the image memory unit 3 for the facsimile 
function. 

20 Computer interface unit 403 is an interface for data communication 

with an external computer, and has a local area network (hereinafter 
referred to as LAN), serial I/F, SCSII/F, a centro I/F for printer data input 
and so on. Through these I/Fs, states of the printer unit and the reader 
unit are notified to the external computer, or in accordance with an 

25 instruction from the computer, an image read by the reader unit 1 is 

transferred to the external computer. Further, a print image data may be 
received from the external computer. The print data notified from 
external computer through computer interface unit 403 is described in a 
dedicated printer code, and therefore the formatter unit 404 converts the 

30 code to raster image data for image formation at the printer unit 2, through 
image memory unit 3. 

Formatter unit 404 develops the raster image data at image memory 
unit 405. Image memory unit may be used as the memory for developing 
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the raster image data by formatter unit 404 in this manner, or it may be 
used when the image at the reader unit is to be transmitted to an external 
computer through the computer interface unit 403 (image scanner function), 
such that the image data transmitted from the image memory unit 3 is once 
5 developed at the image memory unit, converted to the data format to be 

transmitted to external computer, and the data is transmitted through the 
computer interface. 

The core unit 406 controls and manages data transfer between each 
of facsimile unit 401, computer interface unit 403, formatter unit 404, 

10 image memory unit 405 and image memory unit 3. Thus, even when there 
are a plurality of image output units at the external I/F processing unit 4 
and an image transfer path to image memory unit 3 is only one, the images 
can be output with exclusive control or priority control, under the 
management of core unit 406. 

15 Configuration of Image Processing Unit> 

The details of the image processing unit 170 will be described with 
reference to Fig. 4, which is a block diagram of the image processing unit. 

A document image formed through lens 108 on CCD sensor 109 is 
input as luminance data of Black, and converted by CCD sensor 109 to an 

20 analog electric signal. The converted image information is input to an 

analog signal processing unit (not shown), where sample & hold and dark 
level correction are performed. Thereafter, an A/D converting unit 501 
performs analog/digital conversion (A/D conversion), and the digitized 
signal is subjected to shading correction (variation of sensors reading the 

25 document and light distribution characteristic of the document illuminating 
lamp are corrected). The output signal is passed to log converting unit 502. 

The log converting unit 502 has an LUT stored therein for converting 
the input luminance data to density data, and by outputting a table value 
corresponding to the input data, the luminance data is converted to density 

30 data. The density data is transmitted to a magnification processing unit 
503. 

The magnification processing unit 503 magnifies the input image to 
a desired magnification, and the magnified image data is transmitted to a y 
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correcting unit 504. 

The y correcting unit 504 performs, when the density data is output, 
conversion using an LUT, considering printer characteristic, so as to adjust 
the output in accordance with the density value set at an operating unit. 
5 The data that has been subjected to y correction is transmitted to a 

binarizing unit 505. Binarizing unit 505 binarizes multivalue density 
data so that each pixel comes to have density value of "0" or "1". For the 
image data in which one pixel has 8 bits, for example, the density of each 
pixel is converted to "0" or "255", and the image data is binaiized to 1 bit 

10 data of "0" or "1". Thus, the amount of image data stored in the memory is 
reduced. When the image in which one pixel has 8 bits is binarized, the 
number of gradations of the image is converted from 256 gradations to 2 
gradations. Thus, image data with much halftone such as a photograph 
image is, generally, degraded considerably. Thus, it is necessary to realize 

15 quasi halftone representation by binary data. 

At the binarizing unit 505, as a method of pseudo halftone 
representation by binary data, random dither method is used. According 
to this method, when the density of a pixel of interest is larger than a 
certain threshold value, it is set to have the density value of "255" and 

20 when the density is lower than the certain threshold value, it is set to have 
the density value of "0" to obtain binarized result, and thereafter, the 
difference between the actual density value and the binarized density value 
is distributed as errors to the pixels around the pixel of interest. The 
distribution of error is performed by multiplying a weight coefficient on a 

25 matrix prepared in advance by the error resulting from binarization, and 
adding the result to the surrounding pixels. Thus, the average density 
value of the image as a whole can be maintained, realizing pseudo binary 
representation of the halftone. 

The binarized image data is transmitted and stored in the image 

30 memory unit 3. The image data from the computer input through the 
external I/F processing unit 4 is processed as binary image data at the 
external I/F processing unit 4, and therefore, the image data is directly 
transmitted to image memory unit 3. 
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Image memory unit 3 has a high speed page memory, and a large 
capacity memory (hard disk) capable of storing a plurality of page image 
data. The plurality of image data stored in the hard disk can be output in 
an order in accordance with an edition mode designated by an operating 
5 unit of image forming apparatus 100. For example, when sorting is 

designated, images of the bundle of documents read from DF108 are output 
successively. The image data of the documents once stored are read from 
the hard disk, and output repeatedly for a plurality of times. This enables 
the same function as a sorter having a plurality of bins. The image data 

10 output from image memory unit 3 is transmitted to a smoothing unit 506 at 
the printer unit 3. At the smoothing unit 506, data interpolation is 
performed so that line edge portion of the binarized image is made smooth, 
and the image data is output to exposure control unit 120. At the 
exposure control unit 120, the image data is formed on the sheet of transfer 

15 paper, in accordance with the process steps described above. 
Configuration of Image Memory Unit> 

Details of the image memory unit 3 will be described with reference 
to Fig. 5. At the image memory unit 3, binary image is written to page 
memory unit 301 formed by a memory such as a DRAM, through memory 

20 controller unit 302 from external I/F processing unit 4 and image 

processing unit 210, image is read to printer unit 2, and access to the hard 
disk 304 as a large capacity storage apparatus for image input/output is 
performed. External I/F processing unit 4 develops the PDL input from 
the external computer to a bit map, and LZ compressor 303 compresses and 

25 decompresses the image data for input/output to and from the HD. 

Memory controller unit 302 generates a DRAM refresh signal to page 
memory 301, and arbitrates accesses from image I/F processing unit 4, 
image processing unit 210 and hard disk 304 to page memory 301. 

Further, in accordance with an instruction from CPU 171, it controls 

30 write address to page memory unit 301, read address from page memory 
unit 301 and the direction of reading. Thus, CPU 171 controls the 
function of laying out a plurality of document images on page memory unit 
301 and outputting to the printer unit, the function of cutting out only a 
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part of the image to output, and an image rotating function. 
<Operation Panel of Digital Copying Machine> 
The operation unit for setting the copying operation of the image 
forming apparatus described with reference to Fig. 1 will be described with 
5 reference to Fig. 6. Referring to Fig. 6, a lamp 621 is a power lamp 

indicating that the power is on. As the power ON/OFF is switched by 
power switch 613, lamp 621 is turned on/off. Ten keys 622 are used for 
setting the number of image formation, or inputting numerical values for 
mode setting. In a facsimile setting image display, the ten keys are used 

10 for inputting a telephone number. By a clear key 623, the setting input 
through the ten keys 622 is cleared. A reset key 6 16 is for resetting the 
number of image formation, operation mode, the mode of selective paper- 
feed stage and the like to default values. A start key 614 is to start image 
forming operation, when pressed. At the center of start key 614, there is 

15 red and green LEDs (not shown) indicating whether the operation can be 
started or not. When the operation cannot be started, the red LED is on 
and when operation can be started, the green LED is on. A stop key 615 is 
used for stopping the copying operation. 

When guide key 617 is pressed and thereafter another key is pressed, 

20 the function that can be set by the key appears on a display panel. The 
guiding display can be canceled by pressing the guide key 617 again. 
When a user setting key 618 is pressed, it becomes possible for the user to 
change the setting of the image forming apparatus. The setting that can 
be changed by the user includes the time period after which the setting is 

25 automatically cleared, the defined value of the mode when the reset key is 
pressed, and so on. When an interruption key 619 is pressed during the 
image forming operation, other image forming operation is stopped, and a 
copy can be made without using the automatic document feeder 180. A 
display panel 620 is formed by a liquid crystal, for example, and in order to 

30 facilitate detailed mode setting, contents displayed thereon change in 

accordance with the set mode. The surface of the display panel serves as a 
touch sensor. 

In Fig. 6, a display for setting a copying operation mode is shown as 
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an example. In Fig. 6, keys 624 to 634 are displayed on the display panel 
620, and when the key display position is touched, it is determined that the 
key is pressed, and the mode is set. The key 627 is for selecting the paper 
stage and when this key is pressed, a display appears on the display panel 
5 620 enabling setting as to whether cassette 131 or 132 is to be used for 

paper feeding. Keys 628 to 634 are used for setting copying magnification 
of the copying operation. The key 626 is for an advanced application mode 
setting. When this key is set, a display appears on the display panel 
enabling setting of advanced function modes such as multiple operations, 

10 size reduction layout mode, title page* different size sheet mode and so on. 

For example, keys for setting various advanced function modes as shown in 
Fig. 7 appear, enabling setting of the advanced mode. The key 624 is for 
setting a double sided operation. For example, three different double 
sided modes including "one sided-double sided mode" for obtaining double 

15 sided outputs from a single sided document, "double sided-double sided 

mode" for obtaining double sided output from double sided document, and 
"double sided-single sided mode" for obtaining single sided outputs from 
double sided document can be set. A key 625 is a sort key and by pressing 
this key, the operation mode of the paper discharge processing apparatus 

20 190 is set and grouping or sorting of the output sheets using the image 

memory is set. As to the display of keys in the display panel, in addition 
to normal displays, dotted (screen) display appears when a mode 
corresponding to the displayed key cannot be set, indicating that operation 
of that key is not possible. 

25 At an upper portion of display panel 620, contents of the set copying 

operation and the present operating status are displayed. On an upper 
left portion of the display, there is a window indicating which function 
mode is represented by the display image. In the example of Fig. 6, it 
represents a setting display for copy A. Though it is indicated by a letter 

30 in the example of Fig. 6, symbols representing respective operations may be 
used. At a lower portion of display panel 620, the state of operation of 
other function modes which will be described later is displayed up to the 
extent that can be given by 1 line. In the example of Fig. 6, it shows that 
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output operation of copy B to the printer unit is in progress. Beside an 
advanced mode key 626 of display panel 620, there are keys that can be 
changed by the user, and up to two keys can be registered, for the functions 
that can be set through the setting image display of advanced mode. As 
the setting key for the advanced mode is displayed at the position shown in 
the figure, setting of the registered mode is facilitated. These keys are 
generally referred to as preference function keys. 

Fig. 8(A) is a display image for setting an item of preference function 
key 1. Here, this image appears when user setting key 618 is pressed and 
thereafter setting of preference function key 1 is selected by the setting 
item. When an item is selected on the screen of Fig. 8(A) and an OK key is 
pressed, the key of the function displayed by the preference function key 
can be selected. As in the example shown in Fig. 8(B), a new key is 
displayed on the screen. 

Referring to Fig. 6, reference characters 601 to 612 and 631 
represent keys and LED displays for switching displays at the operating 
unit for performing various functions and settings of copying operation and 
system operation using the image forming apparatus 100. Keys 601, 604, 
607, 610 and 631 are used for switching various functions. These keys are 
provided as translucent key buttons, and each key contains an indication 
lamp (not shown) such as an LED. By pressing these keys, lamps in the 
keys turn on, when the operation image display is selected. Respective 
keys are controlled such that only the lamp in the key of the selected 
operation function display image is lit and lamps of other keys are turned 
off. 

On the right side of these keys, green LEDs 603, 606, 609, 612 and 
631 are arranged, respectively. These LEDs represent the state of 
operation of each function. For example, LED 606 of copy B is turned off 
when copy B is in the standby state, and when copy B is in the output 
operation as in the example of Fig. 6, it is flickered. When the image of 
copy B is stored in the hard disk 304 of the image memory and printing 
operation of copy B is not being performed, it is kept on. Similarly, as to 
the LED 609 for the facsimile, it is flickered during the communication 
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operation, printing operation and reading operation, and when the 
facsimile image is in the hard disk 402 of the facsimile unit, it is kept on. 

On the left side of the keys, there are red LEDs 602, 605, 608, 611 
and 632, respectively. These LEDs represent failure of respective 
5 functions. For example, LED 605 for copy B is flickered when copy B is 
interrupted because of lack of paper or jamming. When the copy B 
function key 604 is pressed at this time to switch the display at the 
operating unit to copy B, the state of copy B appears on the display panel, 
so that it is possible to know the details of the failure. 

10 These function switching keys can be pressed regardless of the state 

of operation of various functions, and hence operating unit can be switched. 
Where copy A function and copy B function is switchable as in the present 
embodiment, an operation on a key other than the keys in the display panel 
including stop key, start key, reset key and the like which will be described 

15 later acts on the function selected by the function switching keys 60 1 and 
604. In the example of Fig. 6, when the stop key is pressed while the copy 
A operation image is displayed, the copying operation of copy B output 
operation cannot be stopped. When the copy B copying operation is to be 
stopped, the copy B function key 604 is pressed and thereafter stop key 615 

20 is pressed, and thus the output of copy B is stopped. The data set by user 
setting key 618 is kept for each of the image displays by which copy A and 
copy B operation units are selected, and hence setting operation can be 
done independently, on respective image displays. 
<Personal Box> 

25 The personal box in accordance with the present invention will be 

described with reference to Fig r 9. A temporary area 900 and a personal 
box area 901 are allocated to a hard disk 304b. The temporary area is for 
temporarily storing image data and, after the end of a job, the image data 
are erased. The personal box area is further divided into areas uniquely 

30 identified by personal box numbers. When the personal box is used, the 
PDL image received from host 100 is developed by external I/F processing 
unit to bit map image data, and stored in a personal box area corresponding 
to the personal box number designated by the host. By performing a 
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prescribed operation through operating unit 172, it is possible for the user 
to print the image data stored in the personal box area corresponding to the 
user's own personal box number. Further, a print mode at the time of 
printing associated with the stored image data is also stored in the personal 
5 box area 901. 

In the example shown in Fig. 9, a hard disk of 1GB is used, of which 
300MB is used as the temporary area and 700MB is used as the personal 
box area. In Fig. 6, the personal box area is divided into 10 (ten) personal 
boxes, and hence each box has the area size of 70MB. 

10 The personal boxes have numbers respectively, and boxes 902, 903, 

904 and 905 have box numbers 0, 1, 2 and 9, respectively, for example. 
Box 1 is a box for the user Tanaka. When Tanaka is going to put a PDL 
document to his own personal box from host 1000, he designates the box 
number 1 by host 1000, and transmits the PDL data of the document to the 

15 digital copying machine. When Tanaka wishes to put a PDL document of 
himself to a box of another person, for example, a user Kato, Tanaka 
designates the box number of the person to which the document is to be 
transmitted by host 1000, and transmits the PDL data to the box. If the 
recipient is "Kato", Tanaka designates box number 9. Thus, it becomes 

20 possible to send the PDL document of himself to other person. 
<Printing from Personal Box> 

Fig. 10 is a main display image of the personal box on the display 
unit 172 of digital copying machine 100. The main image display 801 
appears when personal box key 634 of operating unit 172 is pressed. As 

25 shown in Fig. 10, there are ten personal boxes having the numbers 00 to 09, 
and the PDL data from the host are stored in the personal boxes 
corresponding to the designated numbers in the developed form of page by 
page raster images. It is possible to name respective personal box 
numbers by a display, not shown. For example, it is possible to name the 

30 box No. 01 "Tanaka box", so as to clearly indicate that the box is used by 
the person Tanaka. The percentage representations appearing at the 
right most portion of the column of respective boxes represent the ratio of 
occupation with respect to the hard disk capacity of the personal box area 
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as a whole. For example, box No. 0 has the ratio of 2%, and therefore, 
assuming that the hard disk capacity of the personal box area is 700MB, 
approximately 14MB is used. 

A button 802 is to see the job stored in box No. 00. Similarly, 
5 buttons 803, 804 and 805 are buttons to see the jobs stored in box Nos. 01, 
02, and 03. Assume that a user, Tanaka, transfers a document data 
formed by an application to box No. 1, that is, his own box, for storage, from 
the host. When the button 803 for Tanaka's box No. 1 on the personal box 
image display 801 appearing on the operating unit of the digital copying 

10 machine is pressed thereafter, a print mode image display for printing the 
document stored therein appears. By pressing an up/down scroll keys 806 
and 807, the display image can be scrolled, so that the name and the used 
capacity of box Nos. 00 to 09 can be checked. A button 808 is to close the 
display window and by pressing this button, the display return to the main 

15 image of Fig. 6. A button 809 is a facsimile status button and by pressing 
this button, it is possible to confirm the state of fax transmission/reception. 
<New [Registration of Personal Box> 

Maintenance of the personal box will be described with reference to 
Figs. 11 to 19. 

20 Fig. 11 shows a basic display image for registering a personal box. 

By selecting registration of a personal box from a user mode or the like, not 
shown, this image display appears. Here, buttons 1101 to 1104 are 
selection buttons, pressed to select respective personal boxes. Keys 1106 
and 1107 are page up key and page down key, respectively. When key 

25 1106 is pressed, the displayed images scrolls downward, and when the key 
1107 is pressed, the displayed image scrolls upward. When a close key 
1109 is pressed, the display returns to the user mode display or the like. 

On the image display of Fig. 11, by selecting an unregistered 
personal box and the pressing a registration button, a display image for 

30 registering a new personal box (Fig. 12) appears, enabling execution of 

steps for new registration. Fig. 17 is a flow chart of the process steps when 
the registration key is pressed. The process steps of the flow chart are 
implemented by executing a program stored in ROM 174 or RAM 175, by 
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CPU 171. The program may be stored as a program file in a file memory 
such as a floppy disk or a magneto-optical disk, not shown, and may be 
loaded to the RAM. This also applies to the flow charts of Figs. 18 and 19, 
which will be described later. 
5 In Fig. 11, whether the selected personal box is already registered or 

not is determined in step S171. For new registration, it is not registered, 
and therefore the flow proceeds to step S176. In step S176, the image 
display of Fig. 12 appears, requesting input of a name for the personal box. 
In the name input image display of Fig. 12, characters appear when 

10 the alphabets (1206) displayed on the display unit are pressed, and the 
name of the personal box is entered. The entered result is displayed on 
1201. At the time of input, by pressing <Chinese character^ of key 1205, 
hiragana display mode and alpha-numeric display mode are switched. By 
pressing a back space key 1204, a character preceding a cursor is deleted, 

15 by pressing keys 1202 and 1203, the cursor is moved, by pressing the key 

1208, a space is inserted, and by pressing the key 1207 in hiragana display, 
the hiragana is converted not to Chinese characters but katakana. When 
the button 1209 is pressed in hiragana display, hiragana is converted to 
Chinese characters. When OK button is pressed here, input of the name is 

20 completed. By pressing a cancel button here, the display returns to the 
basic display image for registering the personal box (Fig. 11). 

When the input of the name is completed, the flow proceeds to step 
S1707, in which an identification number setting image display of Fig. 13 
appears, requesting input of a first password. In step S1707, a number of 

25 6 digits, for example, is input through the number keys at the operating 

unit, and by pressing OK button 1302, the first password of the additional 
registered personal box is registered. The registered password is checked 
when the file in the personal box is to be printed and when the personal 
box is to be deleted. When the first password is not to be registered here, 

30 only the OK button 1302 is pressed, without entering any number. In that 
case, the password is not registered for the additionally registered personal 
box. Therefore, any file stored in the personal box can be printed without 
any password. When the cancel button 1301 is pressed on the display, the 
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flow returns to step S1706 (the image display of Fig. 12). 

When input of the first password is completed, it is determined in 
step S 1708 as to whether the first password is unregistered or not. When 
the first password is unregistered, that is, when the first password is not 
5 input and OK button is pressed, the flow proceeds to step S1709, in which 
the display of Fig. 16 appears, asking registration of a second password. 
The second password is checked when the personal box is to be deleted, for 
example. Similar to the first password, the second password is registered 
by inputting a number of 6 digits by the number keys on the operation unit 

10 and by pressing the OK button. When the cancel button is pressed here, 
the flow returns to step S1707, in which the display of Fig. 13 appears. 

When the name and the password are input, it is determined in step 
S1701 that the registered personal box is selected or not. Here, as it is a 
new registration, what is selected is the "unregistered" column, and 

15 registered personal boxes are not selected. Therefore, in step S1712, an 
area for the new personal box is secured in hard disk 304b, and for the 
personal box, the corresponding input name and the first and second 
passwords are registered. 

<Deletion and Registration of Personal Box> 

20 When an already registered personal box is selected and the 

registration button is pressed, the selected personal box is deleted and a 
new registration takes place. In that case, input of a password is 
requested. In this case also, the process steps of Fig. 17 are executed, as 
the registration key is pressed. 

25 In step S1701, whether an already registered personal box is selected 

or not is determined. In this case, as an already registered personal box is 
selected, the flow proceeds to step S1702, in which whether the first 
password is unregistered or not is determined. If the first password is 
registered, in step S1703, a password input is requested of the operator, 

30 and the input password is compared with the first password. When the 
first password is unregistered, the input password is compared with the 
second password. 

In step S1705, when the input password matches the registered first 
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or second password, the flow proceeds to step S1706. 

The following process steps are approximately the same as the 
process steps for new registration. In step S1710, however, as it is 
determined that an already registered personal box is selected, the flow 
5 proceeds to step S1711. In step S1711, the selected registered personal 

box, that is, the personal box corresponding to the password checked in step 
S1703 or steps S1704 is deleted. 

<Deletion of Personal Box> 

When the cancel key 1105 is pressed, a deletion mode for the selected 

10 personal box is entered. The deletion mode is for deleting the selected 

personal box. The process steps for deleting the personal box is as shown 
in the flow chart of Fig. 19. 

First, in step S191, whether the first password is unregistered or not 
is determined. If the first password is registered, in step S193, password 

15 input is requested of the operator, and the input password is compared 
with the first password. When the first password is unregistered, the 
password input in step S192 is compared with the second password. 

In step S194, it is determined whether the input password matches 
the registered first or second password, and when it matches, the flow 

20 proceeds to step S195. In step S195, the selected registered personal box, 
that is, the personal box corresponding to the password compared in step 
S192 or step S193 is deleted. Namely, the area of the personal box to be 
deleted shown in Fig. 9 is released, and the name and the password(s) of 
the personal box registered in correspondence therewith are deleted. 

25 <Printing of a Document in the Personal Box> 

Fig. 18 shows a flow chart of the process for printing, which starts at 
a time point when the personal box number to be accessed is designated. 
First, in step S181, whether the first password is unregistered or not is 
determined. When the password is registered, the display of Fig. 14 

30 appears in step S182, requesting password input, and the input password 
is compared with the registered first password. 

Fig. 14 is a password input display image at the operating unit. 
The image display 910 is a password input image display for the personal 
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box. On this display, the first password, for example, a number of 6 digits 
is entered. In the dialogue box 911, the input digits are represented by 
" * and digits not yet entered are represented by "•". A key 912 is the OK 
key, which is pressed when the comparison of the input password is to be 
5 started. A key 9 13 is a cancel key, which is pressed when the password 
input is to be cancelled and the flow is to be returned to the display 801. 

In step S183, whether the input password and the first password 
match or not is determined as a result of comparison. When the 
passwords do not match, the process is terminated at that point, and access 

10 to the personal box is not permitted. 

When the passwords match, or when it is determined in step S181 
that the first password is unregistered, the flow proceeds to step S184, in 
which a document to be printed is designated. 

Fig. 15 is a display showing document data held in one personal box. 

15 The display 930 shows the document data held in a personal box of 

an individual. Columns 923 and 924 represent the documents stored in 
the personal box and attributes thereof. For example, the column 923 
shows the document having the name "A project plan" stored at 11:30 of 
March, 8. Here, the indication "printed" on the right most portion 

20 represents that the document is printed at least once after the document is 
put in the personal box. In this column, an indication such as "NG" 
representing that the document cannot be successfully put in the box as the 
hard disk is full, for example, may appear. The column 924 shows a 
document having the name "B meeting material" stored at 21:14 of March 

25 11. Here, the indication "printing possible" on the right most portion 

represents that the document has not yet been printed after the document 
is put in the personal box, and that printing is possible. By touching this 
line, for example, the column is highlighted, for example, showing that the 
column is selected. 

30 The key 916 is a detailed information key, for indicating details of a 

job of the selected line. By this key, detailed job information set by a 
printing window of a host application, for example, "A4 size sheet, double 
sided, three copies" is displayed. On the display image, it is possible to 
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change the job information at the user's will, for example, the number of 
copies may be changed from three to five. A key 9 17 is a print key, to start 
printing of the printing data held in the form of raster image of the job of 
the highlighted line, in accordance with the contents of print job setting 
5 (displayed by 916 detailed information) designated when the data is 

transferred from the host to the personal box. The key 918 is a cancel key, 
which is pressed when the job of the highlighted line is to be canceled. 
Keys 919 and 920 are up/down scroll keys, and when there are a large 
number of jobs that cannot be displayed on one image plane, the image 

10 display is scrolled. The key 922 is a fax status key and by pressing this 
key, it is possible to confirm the state of facsimile transmission/reception. 
The key 921 is a close key, and by pressing this key, the display of personal 
box image 801 shown in Fig. 10 returns. 

By selecting the document to be printed on the image display 930, 

15 the designated document is printed in step S185. 

In this manner, by pressing the personal box number using buttons 
802 to 805 on the personal box image display 801 on the operating unit and 
by entering the own password through this display, it becomes possible to 
print the desired document in that personal box. 

20 When the password is not set for the personal box, the password 

setting display does not appear, and therefore, printing of the document 
can be started without entering any password. 

The process steps described above will be summarized. When the 
first password is set by the password setting image display of Fig. 13, a 

25 password is necessary when a file in the personal box is to be printed as 
well as when the personal box is to be deleted and, for such an operation, 
the password that is checked is the first password input through the 
display of Fig. 13. When the first password is not set by the password 
setting display of Fig. 13, any file in the personal box can be printed 

30 without any password. When the personal box is to be deleted, the second 
password input through the password setting display of Fig. 16 is checked. 

In this manner, even a personal box, any file in which can be printed 
without any password, requires a password for deletion. Therefore, 
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without knowing the password, the personal box cannot be deleted. 
[Second Embodiment] 

The second password for deletion may not be registered 
independently for each personal box, and alternatively, the password 
5 registered for an administrator may be checked when the personal box is to 
be deleted. In this manner, printing of the contents in the personal box 
can be performed in the similar manner as in the first embodiment. In 
order to delete the personal box, a password of the administrator is 
required. Therefore, unauthorized deletion can be prevented. 

10 [Other Embodiments] 

The present invention may be applied to a system including a 
plurality of apparatuses (for example, host computer, interface apparatus, a 
reader, a printer and so on), or may be applied to a single apparatus (for 
example, a copying machine, a facsimile and the like). 

15 The object of the present invention can be attained by supplying a 

storage medium recording a program code of the software implementing the 
functions of the embodiments described above to a system or an apparatus, 
and reading and executing the program code stored in the recording 
medium by the system or a computer of the apparatus (or a CPU or MPU). 

20 In that case, the program code itself read from the storage medium 

implements the functions of the embodiments described above, and 
therefore the storage medium storing the program code constitutes the 
present invention. 

The recording medium for supplying the program code may include a 

25 floppy disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, 
CD-R, a magnetic tape, a non-volatile memory card, an ROM and the like. 

The function of the above described embodiments is implemented by 
the computer reading and executing the program code and the invention 
also encompasses implementation of the function of the above described 

30 embodiment realized by an OS (Operating System) or the like working on a 
computer performing part or whole of the actual processing based on the 
instructions of the program code. 

Further, when the program code read from the recording medium is 
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written to a function expansion board inserted to a computer or to a 
memory provided at a function expansion unit connected to a computer, 
and based on the instructions of the program code, the function expansion 
board or the CPU of the function expansion unit performs part of or whole 
5 of the actual processing to implement the functions of the embodiments 

described above, such implementation is also encompassed by the present 
invention. 

[Effects of the Invention] 

As described above, according to the present invention, a password 
10 for protecting the personal box is registered without fail. Therefore, even 
a personal box which does not require any password for printing data 
cannot be operated for maintenance including deletion, by an unauthorized 
user who does not know the password. 

[Brief Description of the Drawings] 
15 Fig. 1 is a block diagram of a digital copying machine. 

Fig. 2 is a control block diagram of the digital copying machine. 
Fig. 3 is a block diagram of an external interface processing unit. 
Fig. 4 is a block diagram of an image processing unit. 
Fig. 5 is a block diagram of the image memory unit. 
20 Fig. 6 shows an operating unit of the digital copying machine. 

Fig. 7 shows an exemplary image display for setting a copying 
operation advanced mode of a digital copying machine. 

Fig. 8 shows a preference function key setting operation for the 
copying operation of the digital copying machine. 
25 Fig. 9 is an illustration of the personal box. 

Fig 10 shows personal box basic display on the display unit. 

Fig. 11 shows a personal box registration basic display on the display 

unit. 

Fig. 12 shows a personal box name registration display on the 
30 display unit. 

Fig. 13 shows a personal box password registration display on the 
display unit. 

Fig.l 4 shows a password input display. 
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Fig. 15 shows examples of displays of individual personal box. 
Fig. 16 shows a password registration display for deleting the 
personal box. 

Fig. 17 is a flow chart of a personal box registration process. 
5 Fig. 18 is a flow chart of a document printing process from the 

personal box. 

Fig. 19 is a flow chart of the personal box deletion process. 
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